https://blog.buildogic.com/implementing-plan-based-access-control-nodejs/